Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: dvrcidDd4X0aAAFGhnoMQuDceyqei50872N1wiL45fU=
Subject key identifier: 7F:4E:7F:C4:E2:B0:85:DA:E8:F3:47:EB:FE:41:60:DE:CA:9C:2B:D5
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 0198D698864767F09F59EB205CA559242D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:56 +0000
Manifest this update: Sat 23 Aug 2025 11:02:56 +0000
Manifest next update: Sun 24 Aug 2025 11:02:56 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: 43Oea/56r5aJxjJwXH5Xulbw29QCxpt4VRQHynLJkkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:86:47:67:f0:9f:59:eb:20:5c:a5:59:24:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Aug 23 11:02:56 2025 GMT
Not After : Aug 24 11:02:56 2025 GMT
Subject: CN=7f4e7fc4e2b085dae8f347ebfe4160deca9c2bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:96:ad:c5:a4:0d:69:43:95:34:31:57:fe:
95:a6:ee:b2:f6:19:34:d5:66:97:bf:b1:b6:32:8e:
29:f8:28:99:8a:5e:88:2e:a9:62:ea:4d:33:c6:10:
8d:55:b8:01:73:8f:76:00:87:3a:31:45:cf:04:fc:
76:98:5b:c3:08:3b:4f:93:fa:86:84:7b:f7:ef:4f:
a8:68:ab:19:52:0f:c6:28:4e:6e:3b:cc:78:44:46:
9f:5e:c4:c2:e9:6c:61:35:64:00:c3:98:aa:2d:12:
48:78:d0:8b:69:18:19:bd:63:78:cc:76:fe:2e:c1:
1c:5a:cc:a2:45:30:6f:d3:c4:94:a5:ac:08:fd:f3:
28:31:b8:59:bb:30:93:1e:d4:48:ae:6a:cb:0e:32:
57:f1:b7:75:9f:35:29:be:c6:ad:05:8c:bf:85:bc:
1c:74:16:cb:00:fc:4d:77:2f:e4:93:b8:66:13:33:
a2:4b:fc:1a:0b:48:55:00:5b:15:f9:3a:39:0d:42:
76:78:4a:20:53:3c:56:94:d3:34:b1:f8:f2:50:3b:
a9:c6:ab:82:ef:3e:40:aa:9d:dc:de:7d:f2:1f:1e:
e7:b3:7f:31:95:a0:e9:cd:ca:37:9a:60:b9:4e:3e:
4d:b6:56:f9:9a:d9:82:90:0d:2a:26:00:6b:97:23:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4E:7F:C4:E2:B0:85:DA:E8:F3:47:EB:FE:41:60:DE:CA:9C:2B:D5
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2e:0c:a6:58:9e:96:46:6f:d3:1c:a7:ab:67:47:d3:61:00:
26:1c:0d:d5:e5:b3:10:e4:9e:d2:78:ea:2a:24:29:1b:2a:60:
87:b1:96:24:51:50:51:57:58:41:03:65:8c:42:24:87:df:80:
04:c3:1d:0f:ef:a3:54:34:00:7b:9c:26:73:83:31:69:de:ca:
a0:af:ff:4d:83:7b:a7:9a:d7:4a:83:2f:d5:19:56:1b:f9:66:
73:a6:0c:16:e1:23:90:55:29:01:73:e1:31:4a:53:4a:ba:72:
44:c3:93:bf:0e:37:95:2a:6c:f3:08:1e:00:a7:d8:96:2c:22:
d8:b6:8b:11:52:4d:2f:de:18:ad:11:7e:7b:72:29:3b:58:b3:
74:e5:16:ee:45:85:97:92:36:ed:13:5b:49:b1:09:99:65:58:
a5:07:f5:0e:35:92:73:14:72:aa:a8:5f:46:fb:ff:2b:5e:d0:
e9:22:b7:3f:63:79:e0:e7:d1:d3:11:1b:c9:51:c4:c4:61:97:
50:68:1b:91:ff:c2:21:7e:b6:1b:ce:8f:86:63:72:62:8a:ef:
a0:02:da:2a:71:82:98:bf:4b:a0:5a:25:de:19:34:ee:7d:dd:
47:c5:08:7e:ab:a7:1d:c3:11:28:d6:d1:ec:8b:5a:b5:1b:ff:
ee:47:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:21:10 2025 by rpki-client